This vulnerability, identified as CVE-2026-57083 and categorized under CWE-908 (Use of Uninitialized Resource), affects the Windows Codecs Library in Microsoft Windows 10 Version 1607 (build 10.0.14393.0). The flaw arises from the use of an uninitialized resource, which can lead to information disclosure when exploited locally by an unauthorized attacker. The CVSS v3.1 base score is 5.5, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An unauthorized local attacker can exploit this vulnerability to disclose sensitive information due to the use of an uninitialized resource in the Windows Codecs Library. The confidentiality impact is high, but there is no impact on integrity or availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57083. Applying this patch will remediate the vulnerability.